instagram-profile-lead-scraper

SUSPICIOUS: the core purpose is coherent with browser-based scraping, and BrowserAct appears to have plausible same-org/PyPI provenance, so this is not confirmed malware. However, the skill is higher-risk because it requires transitive installation of another skill/CLI, authorizes automatic dependency installation without separate approval, and uses live browser automation against untrusted web content with possible session/cookie exposure.